forked from thomasxm/BOAZ_beta
-
Notifications
You must be signed in to change notification settings - Fork 0
/
requirements.sh
251 lines (208 loc) · 7.35 KB
/
requirements.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
#!/bin/bash
# set up script for BOAZ evasion tool
# Update and upgrade packages
# Define color codes
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
NC='\033[0m' # No Color
# Print messages with colors
echo -e "${GREEN}[*] Installing required packages for BOAZ evasion tool...${NC}"
echo -e "${YELLOW}[*] Updating and upgrading packages...${NC}"
read -p "Do you want to update and upgrade your packages? [y/n]" yn
case $yn in
[Yy]* )
sudo apt update && sudo apt upgrade -y
echo -e "${GREEN}[*] Packages updated and upgraded.${NC}"
;;
[Nn]* ) echo -e "${YELLOW}[*] Skipping update and upgrade.${NC}";;
* ) echo "Please answer yes or no.";;
esac
sudo apt install
sudo apt install osslsigncode -y
pip3 install pyopenssl
sudo apt install build-essential -y
# Install required packages
sudo apt install -y git
sudo apt install -y cmake
sudo apt install -y ninja-build
sudo apt install -y python3
sudo apt install -y gcc
sudo apt install -y g++
sudo apt install -y zlib1g-dev
sudo apt install -y wine
sudo apt install -y mingw-w64
sudo apt install -y mingw-w64-tools
sudo apt install -y x86_64-w64-mingw32-g++
sudo dpkg --add-architecture i386
apt-get install wine32:i386
if [ -f "./donut" ]; then
echo "'donut' is already installed in the current directory.\n"
else
echo "'donut' not found. Installing...\n"
fi
echo "Installing pe2sh..."
if [ -f "./PIC/pe2shc.exe" ]; then
echo "'pe2shc.exe' is already installed in the current directory.\n"
else
echo "'pe2shc.exe' not found. Installing...\n"
fi
echo "Installing custom obfuscator based on avcleaner...\n"
if [ -f "./avcleaner_bin/avcleaner.bin" ]; then
echo "'avcleaner.bin' is already installed in the current directory.\n"
else
echo "'avcleaner.bin' not found. Installing...\n"
fi
## Install Mangle:
## Run commands:
# Check if Mangle program exists
if [ ! -f ./signature/Mangle ]; then
# Clone the Mangle repository
git clone https://github.com/optiv/Mangle.git
# Navigate to the Mangle directory
cd Mangle
# Get the required Go package
go get github.com/Binject/debug/pe
# Build the Mangle program
go build Mangle.go
# Move the built executable to the signature directory
mv Mangle ../signature/
# Navigate back to the original directory
cd ..
# Remove the Mangle directory
rm -r Mangle
fi
# Install pyMetaTwin
echo "Installing pyMetaTwin..."
# check if signature/metatwin.py file exists, if not git clone a fork of it, otherwise cd into it
if [ ! -f "./signature/metatwin.py" ]; then
git clone https://github.com/thomasxm/pyMetaTwin
cp -r pyMetaTwin/* signature
cd signature
else
cd signature
fi
# Install metatwin dependencies anyway.
if [ ! -f "./metatwin.py" ]; then
chmod +x install.sh
sudo ./install.sh
else
chmod +x install.sh
sudo ./install.sh
fi
cd ..
# Install Syswhisper2 (adjust with actual repository if different)
echo "Installing Syswhisper2..."
## if fodler SysWhispers2 does not exits:
if [ ! -d "./SysWhispers2" ]; then
git clone https://github.com/jthuraisamy/SysWhispers2
cd SysWhispers2
python3 ./syswhispers.py --preset common -o syscalls_common
cd ..
else
cd SysWhispers2
python3 ./syswhispers.py --preset common -o syscalls_common
cd ..
fi
# Clone and build llvm-obfuscator (Akira-obfuscator)
echo -e "${GREEN}[!] Install LLVM Obfuscator, it will take a while...${NC}"
if [ ! -d "akira_built" ]; then
echo "Cloning and building Akira llvm-obfuscator..."
git clone https://github.com/thomasxm/Akira-obfuscator.git
cd Akira-obfuscator && mkdir -p akira_built
cd akira_built && cmake -DCMAKE_CXX_FLAGS="" -DCMAKE_BUILD_TYPE=Release -DLLVM_ENABLE_ASSERTIONS=ON -DLLVM_ENABLE_PROJECTS="clang;clang-tools-extra;lld;lldb" -G "Ninja" ../llvm
ninja -j2
cd .. && mv ./akira_built/ ../
cd ..
rm -r Akira-obfuscator
else
echo -e "${RED}[!] Akira llvm-obfuscator is already installed.${NC}"
fi
# Locate the installed version of x86_64-w64-mingw32
MINGW_DIR=$(ls -d /usr/lib/gcc/x86_64-w64-mingw32/*-win32 | sort -V | tail -n 1)
if [ -z "$MINGW_DIR" ]; then
echo "Error: No x86_64-w64-mingw32 directory found."
exit 1
fi
echo "Using MinGW directory: $MINGW_DIR"
echo "start unit test:"
./akira_built/bin/clang++ -D nullptr=NULL -mllvm -irobf-indbr -mllvm -irobf-icall -mllvm -irobf-indgv -mllvm -irobf-cse -mllvm -irobf-cff -target x86_64-w64-mingw32 loader2_test.c classic_stubs/syscalls.c ./classic_stubs/syscallsstubs.std.x64.s -o test.exe -v -L$MINGW_DIR -L./clang_test_include -I./c++/ -I./c++/mingw32/ -lws2_32 -lpsapi
## if ./test.exe exists, run it with wine
# Check if the build was successful
if [ $? -ne 0 ]; then
echo "Error: Build failed."
exit 1
fi
if [ -f "./test.exe" ]; then
wine ./test.exe
fi
# Check if the test run was successful
if [ $? -ne 0 ]; then
echo -e "${RED}[!] Error: Running test.exe with Wine failed.${NC}"
exit 1
## else rm Akira-obfuscator
else
echo -e "${GREEN}[!] Test run was successful.${NC}"
fi
if [ ! -d "llvm_obfuscator_pluto" ]; then
# Clone and build Pluto
echo "Cloning and building Pluto-obfuscator..."
git clone https://github.com/thomasxm/Pluto.git
cd Pluto && mkdir -p pluto_build
cd pluto_build
cmake -G Ninja -S .. -B build -DCMAKE_C_COMPILER="gcc" -DCMAKE_CXX_COMPILER="g++" -DCMAKE_INSTALL_PREFIX="../llvm_obfuscator_pluto/" -DCMAKE_BUILD_TYPE=Release
ninja -j2 -C build install
mkdir -p ../../../llvm_obfuscator_pluto/
mv ./install/* ../../../llvm_obfuscator_pluto/
cd ../../../
rm -r Pluto
else
echo -e "${GREEN}[!] Pluto is already installed.${NC}"
fi
echo "start unit test:"
./llvm_obfuscator_pluto/bin/clang++ -D nullptr=NULL -O2 -flto -fuse-ld=lld -mllvm -passes=mba,sub,idc,bcf,fla,gle -Xlinker -mllvm -Xlinker -passes=hlw,idc -target x86_64-w64-mingw32 loader2_test.c ./classic_stubs/syscalls.c ./classic_stubs/syscallsstubs.std.x64.s -o ./notepad_llvm.exe -v -L$MINGW_DIR -L./clang_test_include -I./c++/ -I./c++/mingw32/ -lws2_32 -lpsapi
wine ./notepad_llvm.exe
if [ -f "./notepad_llvm.exe" ]; then
wine ./notepad_llvm.exe
fi
# Check if the test run was successful
if [ $? -ne 0 ]; then
echo -e "${RED}[!] Error: Running notepad_llvm.exe with Wine failed.${NC}"
exit 1
else
echo -e "${GREEN}[!] Test run was successful.${NC}"
fi
echo -e "${GREEN}[!] Installation and setup completed! ${NC}"
## Main linker:
## Check if pyinstaller is installed, if not install it:
if [ ! -f "/usr/local/bin/pyinstaller" ]; then
echo -e "${YELLOW}[*] Installing pyinstaller...${NC}"
pip3 install pyinstaller
else
echo -e "${YELLOW}[*] Pyinstaller is already installed.${NC}"
fi
#!/bin/bash
# Check if PyInstaller is installed
if ! command -v pyinstaller &> /dev/null
then
echo "PyInstaller is not installed. Installing PyInstaller..."
# Install PyInstaller
pip install pyinstaller
if [ $? -ne 0 ]; then
echo "Failed to install PyInstaller. Exiting."
fi
else
echo "PyInstaller is already installed."
fi
# Run PyInstaller to create a single executable
echo -e "${YELLOW}[*] Running PyInstaller to build ELF executable. ${NC}"
pyinstaller --onefile Boaz.py
if [ $? -eq 0 ]; then
echo "Executable created successfully."
else
echo "Failed to create the executable."
fi
mv dist/Boaz .
rm -r dist/
echo -e "${GREEN}[+] Setup completed successfully!${NC}"
echo -e "${YELLOW}[+] Main program can be run with python3 Boaz.py or ./Boaz. ${NC}"